We're looking for an experienced DevSecOps & Governance Architect to join a major technology transformation programme, helping define secure, scalable and governed DevSecOps platforms across the enterprise.
This is an architecture-focused role, requiring someone who can bridge security, governance and engineering - translating policy and risk requirements into practical, reusable technical patterns without unnecessarily impacting developer productivity.
Key Responsibilities
Define target and transitional DevSecOps platform architectures. Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Assess and recommend vendor solutions, technologies and deployment options. Establish approved, controlled and unsupported usage patterns. Design governance, exception handling and risk-acceptance mechanisms. Ensure platforms and solutions align with enterprise architecture, security and regulatory obligations. Create reusable reference architectures and patterns that can scale across multiple domains. Improve platform reliability, build success, performance and supportability. Work closely with security, architecture, engineering, delivery and business stakeholders. Essential Experience
Strong background in Enterprise DevSecOps and platform architecture. Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations. Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance. Experience with Identity, SSO, RBAC, logging and auditable security controls. Knowledge of Policy-as-Code and automated security enforcement. Understanding of DSPT/CAF-style assurance, governance and security requirements. Proven ability to translate risk and policy into practical engineering solutions. Excellent architecture workshop, stakeholder management and decision-facilitation skills. Able to balance security, governance and developer experience/productivity.ECS Recruitment Group Ltd is acting as an Employment Business in relation to this vacancy Only candidates based in UK and eligible to work in UK are allowed
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in the UK.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in the UK, connecting you to thousands of jobs fast!
Find the best jobs in the UK, apply in 1 click and get a job today!